Advisories · Technology
openwrt odhcpd.
Every CVE that names openwrt odhcpd among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()
- openwrt odhcpd
- CWE-126
- CVSS 8.8 High
odhcpd DHCPv6 IA dangling first pointer use-after-free
- openwrt odhcpd
- Memory corruption
- CWE-672
- CVSS 8.7 High
odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure
- openwrt odhcpd
- Memory corruption
- Information disclosure
- CVSS 9.8 CriticalCritical · CVSS 9+
odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)
- openwrt odhcpd
- Memory corruption
- CVSS 6.5 Medium
odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
- openwrt odhcpd
- openwrt
- Memory corruption